Lucene search

CVE-2019-12973

🗓️ 26 Jun 2019 00:00:00Reported by ubuntu.comType

In OpenJPEG 2.3.1, excessive iteration in opj_t1_encode_cblks function allows remote attackers to create denial of service via crafted bmp file. Similar to CVE-2018-6616

Reporter	Title	Published	Views	Family All 119
Tenable Nessus	EulerOS 2.0 SP10 : openjpeg2 (EulerOS-SA-2022-1794)	6 Jun 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : openjpeg2 (EulerOS-SA-2022-1848)	15 Jun 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.0 : openjpeg2 (EulerOS-SA-2022-2204)	29 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : openjpeg2 (EulerOS-SA-2022-1811)	6 Jun 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.9.1 : openjpeg2 (EulerOS-SA-2022-2185)	29 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : openjpeg2 (EulerOS-SA-2022-1872)	15 Jun 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.1 : openjpeg2 (EulerOS-SA-2022-2059)	14 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.0 : openjpeg2 (EulerOS-SA-2022-2031)	15 Jul 202200:00	–	nessus
Tenable Nessus	Debian DLA-2277-1 : openjpeg2 security update	14 Jul 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : openjpeg2 (EulerOS-SA-2022-1577)	25 Apr 202200:00	–	nessus

Source	Link
github	www.github.com/uclouvain/openjpeg/pull/1185/commits/cbe7384016083eac16078b359acd7a842253d503
github	www.github.com/uclouvain/openjpeg/issues/1222
ubuntu	www.ubuntu.com/security/notices/USN-4497-1
ubuntu	www.ubuntu.com/security/notices/USN-4782-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-12973
launchpad	www.launchpad.net/bugs/cve/CVE-2019-12973
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-12973

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	blender	any	UNKNOWN
ubuntu	20.04	noarch	blender	any	UNKNOWN
ubuntu	22.04	noarch	blender	any	UNKNOWN
ubuntu	24.04	noarch	blender	any	UNKNOWN
ubuntu	16.04	noarch	blender	any	UNKNOWN
ubuntu	18.04	noarch	insighttoolkit4	any	UNKNOWN
ubuntu	20.04	noarch	insighttoolkit4	any	UNKNOWN
ubuntu	22.04	noarch	insighttoolkit4	any	UNKNOWN
ubuntu	16.04	noarch	insighttoolkit4	any	UNKNOWN
ubuntu	18.04	noarch	openjpeg2	2.3.0-2+deb10u2ubuntu0.1~esm1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Jun 2019 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS24.3

CVSS35.5

EPSS0.004